Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/pAgbxi-MVxvp4IYMr44AxtElxm4.roa
File: pAgbxi-MVxvp4IYMr44AxtElxm4.roa (raw, json)
Hash identifier: zes9Gx38SNn005lgltQXVs5bVMa7dgFUup/0ly9MGgc=
Subject key identifier: A4:08:1B:C6:2F:8C:57:1B:E9:E0:86:0C:AF:8E:00:C6:D1:25:C6:6E
Certificate issuer: /CN=eb57a2c600b69e0bbaee2c68996792f6286abfe7
Certificate serial: 0186A6DE90EFF34A354921F0753820284522
Authority key identifier: EB:57:A2:C6:00:B6:9E:0B:BA:EE:2C:68:99:67:92:F6:28:6A:BF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/61eixgC2ngu67ixomWeS9ihqv-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/pAgbxi-MVxvp4IYMr44AxtElxm4.roa
Signing time: Fri 03 Mar 2023 09:47:29 +0000
ROA not before: Fri 03 Mar 2023 09:47:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200017
IP address blocks: 91.212.216.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a6:de:90:ef:f3:4a:35:49:21:f0:75:38:20:28:45:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb57a2c600b69e0bbaee2c68996792f6286abfe7
Validity
Not Before: Mar 3 09:47:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4081bc62f8c571be9e0860caf8e00c6d125c66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0c:6b:94:81:6a:ff:6b:41:c3:53:78:da:09:
64:aa:df:bf:39:b9:59:d0:99:91:bb:9a:cb:9b:88:
d5:75:ab:0e:48:f7:6a:21:ae:06:8c:20:5b:47:64:
da:bb:73:94:22:9a:7a:2d:67:62:0b:51:b6:d2:96:
37:8b:80:2e:79:3a:f0:74:62:28:90:40:42:a2:34:
64:9c:8c:ad:51:7a:3f:df:99:d7:06:1b:07:1d:b0:
30:fe:58:0e:1e:c2:ec:de:07:75:99:d9:f4:10:06:
f1:f8:0f:e1:4f:a3:28:a3:d0:83:33:bd:9b:af:23:
bb:8a:f5:8c:0d:a5:e3:25:e6:7e:a8:4c:56:31:7a:
57:26:a4:3d:8f:a7:fa:54:58:22:28:7b:ca:3e:8c:
f4:dd:c8:12:18:1b:68:83:ec:f6:1a:f9:9c:b6:b2:
ce:cc:cf:ef:20:c8:e1:52:fe:54:a7:ad:8c:9f:9c:
d8:4d:7d:c7:2a:7e:36:25:30:6b:7c:50:c3:9e:fd:
c2:21:c7:e5:f9:31:7f:8d:a3:03:c4:d9:98:16:45:
e8:d8:ff:73:9e:6e:bc:e8:3b:15:e1:b1:50:d2:46:
3d:a4:14:95:7e:1c:86:ad:a2:16:cb:bd:fd:06:e5:
65:7b:45:13:dc:08:af:28:2a:67:ac:da:6d:b1:3a:
89:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:08:1B:C6:2F:8C:57:1B:E9:E0:86:0C:AF:8E:00:C6:D1:25:C6:6E
X509v3 Authority Key Identifier:
keyid:EB:57:A2:C6:00:B6:9E:0B:BA:EE:2C:68:99:67:92:F6:28:6A:BF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61eixgC2ngu67ixomWeS9ihqv-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/pAgbxi-MVxvp4IYMr44AxtElxm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/77c2db-f7d3-4a8a-9e50-6d0af460fcea/1/61eixgC2ngu67ixomWeS9ihqv-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.216.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:e9:42:d0:72:7f:22:71:ae:f2:9f:5a:14:f9:33:2d:0a:8e:
58:bc:dc:ad:b0:3f:64:b9:09:69:12:02:d9:f7:b4:68:24:ad:
55:e0:ab:f8:fb:65:6d:60:c2:3e:63:a1:24:79:59:2a:35:95:
b0:1d:3f:86:f0:5c:92:dd:f7:9c:ea:3f:13:2c:7d:43:10:fc:
e3:06:4a:f7:24:1c:7d:7e:c7:5b:8b:35:fb:1a:73:4c:c2:64:
53:c3:c8:a5:87:42:82:a4:56:8d:2a:2b:81:0e:01:05:ad:76:
21:ed:59:6e:58:5f:b0:d9:78:8a:d5:f4:37:ae:b9:84:c7:bd:
9e:04:32:0b:5f:81:c8:56:e4:25:ba:da:9c:28:12:14:68:42:
d3:06:0a:aa:3d:73:a7:71:0f:90:60:a8:1e:85:4d:b4:ab:38:
ef:9d:c9:ea:5c:bd:c6:26:6f:6e:2b:80:d0:cb:0c:76:bd:71:
d1:6a:b5:3e:fc:6a:4f:d6:ce:79:4e:36:cc:12:f2:7f:a7:75:
49:e4:61:5f:de:3e:e6:50:e7:a3:7e:62:29:0e:1e:d1:ea:16:
5f:1b:f6:66:08:2c:03:74:0d:d1:00:83:ef:cc:63:e4:d6:e8:
86:01:48:1f:5b:20:3a:ed:f1:9c:ee:64:00:8e:1a:85:0e:3e:
3f:0f:63:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:06 2025 by rpki-client